CVE-2014-2497

4.3

MEDIUMCVSS v2

Published

March 21, 2014

Affected

2 projects

Assigned by

MITRE

Severity scale

010

Description

The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.

php

NPMAllows you to run PHP code in Node.js in various ways.

>= 5.5.0, < 5.5.16, < 5.4.32NVD

php

Python Package IndexHandle some of the strange standards in PHP projects

>= 5.5.0, < 5.5.16, < 5.4.32NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2014-2497

Description

More on this CVE